WOMBATS Shield

How It Works

Local-first network protection and control.

WOMBATS Shield runs protection and control on the device in your network. It helps block known harmful and unwanted domains before connections are made, while giving you practical controls for devices, apps, services, and supported SafeSearch providers.

Router
WOMBATS Shield
Policies
Devices

Setup Flow

1. Connect WOMBATS Shield to your existing router or network.
2. Run setup through the guided local interface.
3. Apply DNS, DHCP, or network settings for your environment.
4. Choose protection policies for content, services, and devices.
5. Manage devices through the local interface.
6. Keep filters and software updated.

How Protection Works

When a device tries to reach a website or service, it often starts with a DNS lookup. WOMBATS Shield can evaluate those lookups against policy and filter sources, then allow or block known harmful and unwanted domains before connections are made.

Known harmful-domain filtering
Unsafe and adult content controls
Catalog-based app/service blocking
SafeSearch for supported providers
DNS request
Policy check
Allow or block

Device Controls

Device-level controls let you manage individual devices without changing the entire network policy every time.

Pause internet access
Relax filtering for a device
Exclude a device from selected controls
Review device policy status locally

What to Expect

Most management happens through the local interface.
Protection and control run on the device.
There is no vendor cloud control plane.
Filtering and updates may use external sources.

Limits to Understand

WOMBATS Shield is designed to make network protection and control more practical, but DNS-layer filtering has boundaries.

VPNs may bypass local policy.
Encrypted DNS may bypass local policy.
Devices outside the managed network are outside local policy.
App/service blocking depends on supported catalogs.